CVEvulnerability
CVE-2011-5164
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-09-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a crafted file name in a LIST command response.
Affected configurations
• vandyke absoluteftp 1.9.6
• vandyke absoluteftp 2.0.3
• vandyke absoluteftp 2.0.4
• vandyke absoluteftp 2.0.5
• vandyke absoluteftp 2.2.1
• vandyke absoluteftp 2.2.2
• vandyke absoluteftp 2.2.3
• vandyke absoluteftp 2.2.4
• vandyke absoluteftp 2.2.5
• vandyke absoluteftp 2.2.6
• vandyke absoluteftp 2.2.7
• vandyke absoluteftp 2.2.8
• vandyke absoluteftp 2.2.9
• vandyke absoluteftp 2.2.10
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/46781 Vendor Advisory
- http://www.exploit-db.com/exploits/18102 Exploit
- http://www.osvdb.org/77105 www.osvdb.org
- http://www.saintcorporation.com/cgi-bin/exploit_info/vandyke_absoluteftp_list_client_overflow www.saintcorporation.com
- http://www.securityfocus.com/bid/50614 www.securityfocus.com
- http://secunia.com/advisories/46781 Vendor Advisory
- http://www.exploit-db.com/exploits/18102 Exploit
- http://www.osvdb.org/77105 www.osvdb.org
- http://www.saintcorporation.com/cgi-bin/exploit_info/vandyke_absoluteftp_list_client_overflow www.saintcorporation.com
- http://www.securityfocus.com/bid/50614 www.securityfocus.com